Configuring Network Interface (Network Setting) How to set up your FortiWAN
Local IP Remote IP
11.11.11.11 10.10.10.10
21.21.21.21 20.20.20.20
Define the Routing Rule.
Source Destination Service Group
192.168.100.0/255.255.255.0 192.168.10.0/255.255.255.0 Any Group Name
Note that the DHCP Relay can only work with Tunnel Routing or Tunnel Routing over IPSec Transport Mode. It does
not support relaying DHCP requests through IPSec Tunnel Mode (See "IPSec VPN").
IPv6 Automatic Addressing
FortiWAN provides stateless and stateful mechanisms to allocate IPv6 addresses to hosts in the following subnets or
IP range:
DMZ Side
l Routing Mode, IPv6 Basic Subnet: Subnet in DMZ
l Routing Mode, IPv6 Basic Subnet: Subnet in WAN and DMZ
l Bridge Mode: One Static IP, IPv6 Basic Subnet: Subnet in DMZ
l Bridge Mode: Multiple Static IP, IPv6 IP(s) in DMZ
l Bridge Mode: Multiple Static IP, IPv6 Basic Subnet: Subnet in DMZ
LAN Side
l LAN Private Subnet
Stateless Address Autoconfiguration (SLAAC) is a standard mechanism to equip hosts with IPv6 addresses and
related routing information through the IPv6 router advertisements (RA). SLAAC has two properties:
l SLAAC is a stateless mechanism which is short of the IP management. SLAAC is incapable of controlling the
mapping between a host and an IPv6 address.
l DNS information is absent from the traditional Router Advertisement messages. SLAAC with options of RDNSS
and DNSSL included in RA messages (what is called SLAAC RDNSS) can convey information about DNS recursive
servers and DNS Search Lists.
Comparing with SLAAC, DHCPv6 takes the advantage of IP management, so that is called stateful. By specifying the
IP pool and static IP mapping, administrators are able to control how the IPv6 addresses be allocated via DHCPv6.
FortiWAN provides both SLAAC RDNSS and DHCPv6 for the stateless and stateful IPv6 automatic addressing
Stateless IPv6 addressing: SLAAC
Enabling the stateless IPv6 addressing for the "IPv6 Basic Subnets" or "IPv6 (IPs) in DMZ" by checking the check-box
Enable SLAAC.
FortiWAN Handbook
Fortinet Technologies Inc.
61
To Next Page
Loading...
